BigFix Remote Control 10.1 FP5 is now available

Release Announcements Lifecycle (Release Announcements)
1

HCL BigFix is pleased to announce several key enhancements to BigFix Remote Control.

Web Based Controller
This release introduces the Web Controller, allowing operators to start active or monitor Broker Sessions directly from a browser via the Remote Control Lite Web Portal (LWP). This eliminates the need to install the standalone RC Controller application. Please note that this initial version has limited functionality compared to the standalone application. We plan to extend this new component by adding new features over time.

Key limitations include:

- Only Monitor and Active Session modes are available.

  • Only Broker Session types with Connection Codes are supported (Managed and Unattended Sessions type are not available).
  • Supported browsers: Edge and Chrome.

- File Transfer and Chat are not currently supported

  • Session re-connection in case of an unexpected connection drop is not currently supported

- Maximum number of concurrent Web Controller sessions is limited to 10 for each Broker

- Quick Text Input is not currently supported

- Privacy Mode is not currently supported

- Joining sessions or collaborations is not currently supported

- Multi screen selection is not currently supported

- Smart Card selection is not allowed

RestAPI for Integration with Remote Control

New REST APIs enable integration with external products. These APIs allow users to check available Session Modes for specific computers, initiate Web Controller sessions, and retrieve session recordings.

Single Sign-On (SSO) for Lite Web Portal (LWP)

SSO is now available for the Lite Web Portal, allowing users to log in seamlessly without manually entering credentials each time.

New application server and Java runtime

IBM WAS Liberty has been replaced with Open Liberty version 25, and the Java runtime has been upgraded to IBM Java Semeru version 25.
The default keystore now is PKCS#12 (.p12).
The Server now uses FFmpeg to export recordings so JMF and XVID are no longer needed.
Usage Notes and Limitations:

  • The RC Server now only supports 64-bit architectures; 32-bit support has been discontinued.
  • The iKeyman tool used to handle keystores has been replaced by the Java Semeru keytool utility.
  • Lack of connection with Oracle if FIPS is enabled
  • JDBC drivers should be updated to support Java 25
  • JKS Keystores are not supported if FIPS is enabled

New Java runtime and FIPS 140-3 support for the Controller
The Java runtime for the Controller application has been upgraded to IBM Java Semeru version 25.
Now the Controller supports the FIPS 140-3 module.
Usage Notes and Limitations:

  • The RC Controller now only supports 64-bit architectures; 32-bit support has been discontinued.

Azure SQL Managed Instance

The Remote Control Server database can now be hosted using the Azure SQL Managed Instance cloud service.

**Fixed vulnerabilities**

This release addresses the following vulnerabilities:

- CVE-2026-33870 and CVE-2026-33871: affecting the Remote Control Server, which could allow request smuggling or Denial of Service (DoS) attacks.

 Affected component: Remote Control Server.

 Affected version: Remote Control version 10.1.0 FP4 and earlier.

**Resolved Defect Articles:**

KB0129071: Entra ID configuration utility allows to connect with plaintext secret and the Secret Encrypted flag enabled
KB0128078: Entra ID users membership sync is not working

KB0129807: Unable to export the recording
KB0127880: DOC - Remote Control AV Exclusion for Linux / Mac
KB0127810: DOC - Remote Control SSL not working
KB0127558: DOC - Add that File Transfer doesn't keep file metadata

Update of IBM Open Liberty, IBM Semeru Java, OpenSSL and Log4j
This product release adopts the following:
• Open Liberty version is 25.0.0.12
• Semeru Java version is 25.0.2.1
• OpenSSL version is 3.5.5
• Log4j has been updated to version 2.25.4

**Published site version:**

Remote Control, site version 84 (Build Number 10.1.0.0548)

With kind regards,

  The BigFix Remote Control Team
2 Likes
2

Note: The documentation will be upgraded soon.

3

I updated the announcement description with the following information:
Update of IBM Open Liberty, IBM Semeru Java, OpenSSL and Log4j
This product release adopts the following:
• Open Liberty version is 25.0.0.12
• Semeru Java version is 25.0.2.1
• OpenSSL version is 3.5.5
• Log4j has been updated to version 2.25.4

4

I updated to this version and the scaled view function is not working properly. It would shrink the screen so much that I can’t see the text and the cursor doesn’t move in the right places. Anyone else experiencing this issue?

5

I downgraded the controller back to the previous version and it is working normally now. Must be a bug in this new one.

6

Hi @hyee,

Remote Control Dev here. We didn't catch this issue during our release testing, so we'd like to check your environment details to see if it's a unique configuration. Could you please provide:

  1. Operating System: What OS is running on both the target and the controller?
  2. Screen Resolution: What are the resolutions for both machines? Are either of them running something other than standard Full HD (1080p)?
  3. Display Scaling: Are you using any OS-level display scaling (e.g., 125% or 150%) on either machine?

Let me know so we can try to test the configuration here in the lab and confirm the bug :slight_smile:

7

Hi,

All our workstations are set the same way. We are running Windows 11, 1080p display, and default windows scaling. We reverted our controllers back to the previous version and it works fine.

Thanks.

Herman

9

Thank you very much for the info shared.
I asked the test team to try to reproduce the issue you are facing in our lab, but it seems we can’t reproduce it.
You can contact the support team so we can follow the case and try to fix the issue.
Thanks, let me know!

10

I already opened a support case. Thanks.